he444 Privacy Policy

1 Data Controller

The data controller responsible for the personal data of players and visitors on the he444 platform is the he444 operating entity, reachable at the following contact address: [email protected]. For the purposes of this Privacy Policy, "data controller" means the entity that determines the purposes and means of processing personal data collected through the he444 platform at https://he444.io.

If you have any questions, concerns, or requests relating to the processing of your personal data by he444, you should direct them to the support team using the contact details provided in Section 13 of this Privacy Policy. he444 will respond to all data-related enquiries within 14 working days of receipt.

2 Data We Collect

he444 collects the following categories of personal data from players and platform visitors. The specific data points collected depend on whether you are a registered account holder or an anonymous visitor, and on the services you use.

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for mandatory age verification — players must be 21 or older).
• Gender (optional, collected during registration).
• Username chosen at the time of account creation.
• National identity card number, passport number, or driving licence number (collected during KYC verification).

2.2 Contact Data

• Email address (primary communication channel for account notifications and support).
• Mobile phone number (used for account verification and two-factor authentication).
• Residential address (collected as part of enhanced KYC verification where required).

2.3 Financial Data

• Mobile financial service account details (bKash number, Nagad number, Rocket number, Upay number) used for deposit and withdrawal processing.
• Bank account details where bank transfer is selected as the preferred payment method.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.
• Account wallet balance and bonus fund balance.

2.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP lookup.
• Device type, operating system, and browser version.
• Session start and end times, pages visited, and features accessed.
• Betting history including game type, wager amounts, outcomes, and timestamps.
• Crash and error logs generated during platform use.

2.5 Communications Data

• Content of live chat, email, and support ticket conversations with the he444 team.
• Feedback, survey responses, and complaints submitted by players.
• Marketing preference settings and communication opt-in or opt-out records.

3 How We Collect Data

he444 collects personal data through the following channels and mechanisms:

• Direct collection: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing a survey or feedback form.
• Automated collection: Technical and usage data collected automatically by the he444 platform servers and analytics systems when you access or interact with the platform, including data collected via cookies and similar technologies (see Section 8).
• Third-party sources: Identity verification data provided by certified KYC and anti-money-laundering (AML) service providers as part of the account verification process. Payment confirmation data provided by bKash, Nagad, Rocket, Upay, and other supported payment processors.
• Publicly available sources: In limited circumstances where required for fraud prevention or compliance purposes, he444 may supplement account data with information from publicly available registers or databases.

4 Purpose & Legal Basis for Processing

he444 processes personal data only where a valid legal basis exists. The following table summarises the primary processing purposes and their corresponding legal bases.

Where he444 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for marketing communications can be done via the account dashboard or by contacting [email protected].

5 Data Sharing & Disclosure

he444 does not sell, rent, or trade your personal data. Personal data may be shared only in the following limited and controlled circumstances:

5.1 Service Providers

he444 engages carefully selected third-party service providers to assist in operating the platform. These providers act as data processors on behalf of he444 and are contractually bound to process personal data only on he444's instructions and in accordance with applicable data protection standards. Categories of service providers include:

• KYC and identity verification providers.
• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank partners).
• Cloud hosting and server infrastructure providers.
• Customer support software and live chat platforms.
• Fraud detection and cybersecurity service providers.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) for the purpose of game session data processing only.

5.2 Legal & Regulatory Disclosure

he444 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, he444 will disclose only the minimum data necessary to comply with the legal obligation and will notify the affected player where permitted by law.

5.3 Business Transfers

In the event that he444 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by he444 may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer by email with a minimum of 30 days' notice, and the successor entity will be required to honour the commitments made in this Privacy Policy.

5.4 Aggregate & Anonymised Data

he444 may share aggregated, anonymised statistical data about platform usage with third parties for research, industry reporting, or marketing purposes. Such data does not identify any individual player and cannot be reasonably used to re-identify any person.

6 Data Retention

he444 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, or to resolve disputes and enforce agreements. The following retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a period of 5 years following account closure, in compliance with applicable anti-money-laundering and financial record-keeping regulations.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission, as required by applicable AML regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support and communications records: Retained for 3 years from the date of the last communication in each support case.
• Technical and usage logs: Retained for 12 months on a rolling basis, after which they are anonymised or deleted.
• Marketing preference records: Retained for 3 years from the date of opt-in or until consent is withdrawn, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with he444's data lifecycle management procedures.

7 Security Measures

he444 applies a layered security architecture to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in transit: All data transmitted between player devices and he444 servers is encrypted using TLS 1.2 or higher with 256-bit encryption.
• Encryption at rest: Sensitive data fields stored in he444 databases are encrypted using AES-256 encryption.
• Password hashing: Account passwords are stored exclusively as salted bcrypt hashes. Plain-text passwords are never stored or transmitted.
• Access controls: Access to personal data within he444's internal systems is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication: Available to all registered players and strongly recommended as an additional layer of account security.
• Vulnerability management: he444's platform and infrastructure undergo regular security assessments and penetration testing. Identified vulnerabilities are remediated in accordance with he444's internal security response procedures.
• Data breach response: In the event of a confirmed personal data breach, he444 will assess the risk to affected players, notify relevant regulatory authorities where required, and communicate with affected players within 72 hours of becoming aware of the breach where the breach poses a high risk to individual rights.

While he444 takes all reasonable technical and organisational measures to protect personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their he444 accounts.

8 Cookies & Tracking Technologies

The he444 platform uses cookies and similar tracking technologies to operate core platform functions, maintain your login session, remember your language and display preferences, and analyse platform performance. he444 uses the following categories of cookies:

he444 does not use advertising cookies, retargeting cookies, or third-party social media tracking pixels. You can manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the he444 platform from functioning correctly and may result in your inability to log in or complete transactions.

9 Your Data Rights

As a player on the he444 platform, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your he444 account, clearly stating the nature of your request:

• Right of access: You may request a copy of the personal data he444 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by he444. Many data fields can be updated directly from within your account settings dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations described in Section 6.
• Right to restrict processing: You may request that he444 restrict the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to he444, where technically feasible.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

he444 will respond to all data rights requests within 14 working days of receipt. Where a request is complex or numerous, he444 may extend this period by a further 30 days and will notify you accordingly.

10 Minors & Age Restriction

The he444 platform is strictly restricted to individuals aged 21 years and above. he444 does not knowingly collect personal data from any person under the age of 21. If he444 becomes aware that personal data has been submitted by or on behalf of a person under the age of 21, that data will be deleted immediately and the associated account will be closed without notice.

Parents and guardians who believe that a minor under their care may have registered an account on the he444 platform are strongly encouraged to contact the support team at [email protected] immediately. he444 will investigate and take appropriate action, including account closure and data deletion, on a priority basis.

11 International Data Transfers

The he444 platform primarily serves players in Bangladesh. Some of he444's third-party service providers, including cloud hosting and KYC verification partners, may process personal data on servers located outside Bangladesh. Where such international transfers occur, he444 ensures that appropriate safeguards are in place to protect the personal data transferred, including contractual protections equivalent to those required under applicable data protection standards.

By using the he444 platform, you acknowledge that your personal data may be transferred to and processed in countries other than your country of residence. he444 will always ensure that such transfers are carried out securely and in compliance with the data protection commitments set out in this Privacy Policy.

12 Changes to This Privacy Policy

he444 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable regulations, or platform features. Material changes to this Privacy Policy will be communicated to registered players via email to the address held on the account, with a minimum of 14 days' notice before the amended policy takes effect.

The most current version of the he444 Privacy Policy is always available at https://he444.io/privacy-policy, along with the version number and effective date. Minor, non-material updates — such as typographical corrections or clarifications that do not affect data subject rights — may be made without prior notice. Your continued use of the he444 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how he444 has handled your personal data, please contact the he444 data support team:

• Email: [email protected] — this is the primary and authorised channel for all data-related enquiries. Do not send sensitive documents via email unless specifically requested by the he444 team.
• Subject line: Please use the subject line "Privacy Request — [Your Registered Email]" to ensure prompt routing of your enquiry to the correct team.
• Response time: he444 will acknowledge all privacy-related enquiries within 48 hours and provide a full response within 14 working days.

If you are not satisfied with he444's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection or regulatory authority in your jurisdiction. he444 will cooperate fully with any regulatory investigation relating to the processing of personal data.

For general platform support, account queries, and technical assistance, the he444 support team is available 24 hours a day, 7 days a week via live chat and email at [email protected].